Privacy Policy

Last updated: August 21, 2026

Ocano operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Ocano is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

Contact details including your name, address, billing address, shipping address, phone number, and email address.
Financial information including payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
Account information including your username, password, preferences, and settings, where applicable.
Transaction information including the items you view, add to your cart, purchase, return, exchange, cancel, or otherwise interact with, as well as your transaction history.
Communications with us including information you provide when contacting our customer support team or communicating with us by email, phone, or other means.
Device information including information about your device, browser, network connection, IP address, and other unique identifiers.
Usage information including information regarding how and when you interact with or navigate our Services.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you including when you create an account, visit or use the Services, place an order, communicate with us, subscribe to communications, or otherwise provide us with your personal information.
Automatically through the Services including from your device when you use our website or interact with our Services, including through cookies and similar technologies.
From our service providers including when we engage service providers to enable certain technologies or services and they collect or process personal information on our behalf.
From our partners or other third parties including payment providers, advertising partners, analytics providers, social media platforms, and other service providers.

How We Use Your Personal Information

Depending on how you interact with us or which Services you use, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. We use your personal information to provide you with our Services, process payments, fulfill orders, remember your preferences, process purchases, returns, exchanges or other transactions, arrange shipping, facilitate customer support, enable product reviews, and improve your shopping experience.
Marketing and Advertising. We may use your personal information for marketing and promotional purposes, such as sending marketing communications by email or other permitted methods and showing you advertisements for products or services based on your activity with our Services, subject to applicable law and your choices.
Security and Fraud Prevention. We use personal information to authenticate accounts, provide a secure shopping experience, detect and investigate suspected fraudulent, illegal, unsafe, or malicious activity, protect our Services, and maintain security.
Communicating with You. We use your personal information to provide customer support, respond to inquiries, provide information about your orders, and maintain our business relationship with you.
Legal Reasons. We may use your personal information to comply with applicable laws, respond to valid legal requests, enforce our terms and policies, investigate potential violations, and protect our rights, customers, and Services.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate business purposes subject to this Privacy Policy and applicable law. Such circumstances may include:

With Shopify, vendors, and other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and shipping.
With business and marketing partners to provide marketing services and advertise to you, where permitted by applicable law.
When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as when we need to share information with a shipping provider to deliver your order or when you use social media features.
With our affiliates or otherwise within our corporate group, where applicable.
In connection with a business transaction such as a merger, acquisition, restructuring, sale of assets, or bankruptcy.
To comply with applicable legal obligations, including lawful requests from courts, law enforcement, regulators, or government authorities.
To enforce applicable terms and policies and to protect or defend the Services, our rights, our customers, or other individuals.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services may be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services.

Shopify may also process information about your interactions with our Store and other merchants in connection with certain Shopify features. In these circumstances, Shopify may be responsible for processing personal information for its own purposes. To learn more about how Shopify uses personal information and the rights you may have, please review the Shopify Consumer Privacy Policy.

Depending on where you live, you may exercise certain privacy rights relating to personal information processed by Shopify through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions.

We do not guarantee and are not responsible for the privacy or security practices of such third-party websites, including the accuracy, completeness, or reliability of information found on those websites.

Information you provide on public or semi-public platforms, including information shared through third-party social networking platforms, may be viewable by other users of those platforms. Our inclusion of such links does not, by itself, imply endorsement of the content, owners, or operators of those platforms.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from children under the age of majority applicable in their jurisdiction.

If you are a parent or guardian and believe that a child has provided us with personal information, you may contact us using the information provided below and request that the information be deleted, subject to applicable law.

Security and Retention of Your Information

We take reasonable measures to protect personal information against unauthorized access, misuse, alteration, disclosure, or destruction. However, no security measures are perfect or completely impenetrable, and we cannot guarantee absolute security.

We recommend that you avoid using unsecured communication channels to send sensitive or confidential information.

How long we retain personal information depends on factors such as whether we need the information to maintain your account, provide Services, fulfill transactions, comply with legal obligations, resolve disputes, prevent fraud, or enforce applicable agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may be subject to exceptions and limitations under applicable law.

Right to Access / Know. You may have the right to request access to personal information that we hold about you.
Right to Delete. You may have the right to request deletion of personal information that we maintain about you.
Right to Correct. You may have the right to request correction of inaccurate personal information.
Right of Portability. You may have the right to receive a copy of certain personal information we hold about you and, in certain circumstances, request that it be transferred to another provider.
Managing Communication Preferences. You may opt out of promotional emails by using the unsubscribe option included in our marketing communications. Even if you opt out of promotional communications, we may continue to send non-promotional communications relating to your orders, account, or transactions.

If you reside in the UK or European Economic Area, and subject to applicable exceptions and limitations, you may also have the following rights:

Objection to Processing and Restriction of Processing: You may have the right to ask us to stop or restrict the processing of your personal information for certain purposes.
Withdrawal of Consent: Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before your withdrawal.

You may exercise applicable rights by contacting us using the contact information provided below. You may also have rights to complain to the relevant data protection authority in your jurisdiction.

We will not discriminate against you for exercising your applicable privacy rights. We may need to verify your identity before processing a request, as permitted or required by law.

Complaints

If you have concerns or complaints about how we process your personal information, please contact us using the contact information provided below.

If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. For the UK, you can contact the Information Commissioner's Office (ICO).

International Transfers

Your personal information may be transferred, stored, or processed outside the country in which you live, including in countries that may have different data protection laws.

Where required by applicable law, we will use appropriate safeguards and recognized transfer mechanisms for international transfers of personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, Services, legal requirements, or regulatory obligations.

When we make changes, we will post the revised Privacy Policy on this website and update the "Last updated" date. Where required by applicable law, we will also provide additional notice of material changes.